Shell Programming and Scripting

Hello All.

is there anyscript or way to limit hosts/ips for users?

freebsd4.4-stable


thanks

Are you asking how to limit the number of times a user can logon to a particular box?

If so, I believe that there is. I will have to lookup what file you need to create. Probably a file in /etc to configure it.


On HPUX, there is a file called /etc/sw-limit-login that can allow you to regulate users logins.

Of course, your version of UNIX may be different. Hope that gives you some info.

No ,

i want every user on my machine only have one ip host what we assing for him. and block him from access other hosts/ips .

for example : if we assing ip 216.200.102.1 for Star,

that mean star cant use more than this ip what we give him, even if he try to hack anthor one.


hope u got me!

I am not really familiar with FreeBSD but most Unix systems have the concept of host.allow and hosts.deny which allow and deny hosts by IP or name respectively. You may want to check into this.

thanks, but host.allow deny that use for out access i want block inside users access



Best

OK, I'm trying to get this straight:
You have a user on your machine that is cracking accounts on other machines. You would like to limit where this user can go?

Frankly, I would eject this user right away! She is a liability to you and your organization. The first way I could think of, would be to use groups to allow execution of any client binary you want him away from (telnet, rlogin, ssh, etc...) by only that group. Add other users to that group, but disclude him from that group, so he can't even use them. Don't forget to remove access for compilers, ftp (inbound), perl, and even certain shells. (For example, some shells can communicate via a psuedo-device "/dev/tcp/host/port" that may allow some access....).

Best advice, rm -r /home/userdir... get rid of the punk.

now if we say u user on my machine and we assing for u for example ip : 1.1.1.1

and the machine have full calss c for 1.1.1.0/254

time u login to run eggdrop for example u can edit only eggdrop.conf and put on it for example ip 1.1.1.2 the eggdrop gonna work fine with you


here is my problem i dont want users use more than what we assing for them hope u got me know!


Thanks